This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/DVTf_5yCOBj02L0_BNQxFYZ6k8w.roa File: DVTf_5yCOBj02L0_BNQxFYZ6k8w.roa (raw, json) Hash identifier: cTTE0xiWdv+38wchcvOHNRPPWHdMRDsNTimSJDnJNbE= Subject key identifier: 0D:54:DF:FF:9C:82:38:18:F4:D8:BD:3F:04:D4:31:15:86:7A:93:CC Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7 Certificate serial: 019B78A2B2E59CB725C1C2D8AE0A162CC59C Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/DVTf_5yCOBj02L0_BNQxFYZ6k8w.roa Signing time: Thu 01 Jan 2026 08:18:07 +0000 ROA not before: Thu 01 Jan 2026 08:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58212 IP address blocks: 37.247.119.0/24 maxlen: 24 185.7.82.0/24 maxlen: 24 185.7.83.0/24 maxlen: 24 2a03:403::/32 maxlen: 32 2a03:403:4000::/34 maxlen: 34 2a03:403:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:b2:e5:9c:b7:25:c1:c2:d8:ae:0a:16:2c:c5:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7 Validity Not Before: Jan 1 08:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d54dfff9c823818f4d8bd3f04d43115867a93cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:21:1b:8e:ca:75:d2:4e:39:0f:a3:5e:6d:ee: 09:83:b7:be:94:2c:bc:e9:ef:4a:73:eb:29:ed:7a: 5c:c4:ea:1d:07:fa:ed:3f:1c:bb:7b:41:36:92:4a: 2b:70:05:24:97:06:e3:71:9a:f4:9e:15:b9:71:e1: 5c:33:1c:b7:ea:45:90:26:d9:76:72:0c:bb:5d:49: df:c0:e1:15:63:48:e7:8a:c2:01:4d:c8:72:b5:e8: 66:b0:37:0b:4a:2c:ae:0f:90:9d:f5:26:05:64:b4: 6a:95:94:b8:cc:d8:05:8e:b1:f7:da:58:1a:0e:5d: 69:d3:35:92:31:7f:7b:6b:4f:4f:3b:5a:a9:bb:d7: a0:ca:49:f4:e2:87:cf:f1:15:38:f4:10:03:46:27: a3:a2:4e:11:92:ee:b8:64:d6:c9:b4:b9:5e:6d:d4: bc:42:91:dd:ce:bc:75:14:8c:cd:bf:93:af:24:72: 16:fb:c5:d4:b2:2b:18:c9:81:95:5b:e6:a5:d3:98: cf:ff:ca:49:85:98:b0:4b:e2:6f:d8:2a:4c:1e:0c: 42:d6:3f:ea:46:c6:98:d0:38:7f:dd:40:88:f6:da: 6e:ff:29:7b:3e:ed:f8:fe:99:a8:56:2c:87:c9:be: fd:40:c6:dc:00:73:db:61:f4:e8:cb:a7:49:b6:c1: 8b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:54:DF:FF:9C:82:38:18:F4:D8:BD:3F:04:D4:31:15:86:7A:93:CC X509v3 Authority Key Identifier: keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/DVTf_5yCOBj02L0_BNQxFYZ6k8w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.247.119.0/24 185.7.82.0/23 IPv6: 2a03:403::/32 Signature Algorithm: sha256WithRSAEncryption 50:dc:ce:5d:c5:e4:47:22:c5:1b:02:9e:ce:15:2b:0d:f3:b9: 91:be:02:5d:96:4b:a7:f1:b4:6b:70:aa:5d:2d:e7:7e:94:47: e7:68:c6:29:5f:1e:1c:51:ba:9d:11:42:fb:cf:36:59:70:a6: 14:ea:d9:22:d3:5d:b5:9c:d2:73:c3:8b:8e:cb:9e:d7:40:19: 23:97:22:f0:e8:4e:18:bd:ce:8f:a9:30:cf:63:b4:00:ba:ae: 63:31:4a:d4:59:d2:f3:13:f8:95:26:6e:dc:cf:43:7f:9f:67: 44:d2:f0:0d:c9:7a:89:89:5a:57:d9:5f:e0:a9:13:18:d7:00: 8f:ac:6d:1b:97:05:eb:c0:1e:aa:8b:17:78:21:17:ed:fa:ff: 4f:29:90:92:1a:25:de:20:40:35:46:f0:74:ec:8f:f1:60:59: b3:96:87:2c:9f:64:94:67:4a:8c:69:b4:ee:b2:87:c1:7d:f2: 9d:99:7d:96:93:26:9c:d9:90:9d:45:ff:d9:44:80:2c:27:74: 2c:56:14:5c:46:64:f4:07:ad:2c:3b:02:3f:a1:0a:e3:30:c5: df:04:de:b4:49:cc:62:33:26:57:44:22:c6:cb:31:6d:c2:db: e7:6e:4d:b5:b9:1a:bc:fe:bf:bf:c6:28:42:ba:de:86:12:a0: 78:33:15:d2 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4orLlnLclwcLYrgoWLMWcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NGEyYWVlMDg2MTc0YjAxMjcyZmFlNzc5YWQ0MzFlYjA5 MmFlYjcwHhcNMjYwMTAxMDgxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDU0ZGZmZjljODIzODE4ZjRkOGJkM2YwNGQ0MzExNTg2N2E5M2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSEbjsp10k45D6Nebe4Jg7e+lCy8 6e9Kc+sp7XpcxOodB/rtPxy7e0E2kkorcAUklwbjcZr0nhW5ceFcMxy36kWQJtl2 cgy7XUnfwOEVY0jnisIBTchytehmsDcLSiyuD5Cd9SYFZLRqlZS4zNgFjrH32lga Dl1p0zWSMX97a09PO1qpu9egykn04ofP8RU49BADRiejok4Rku64ZNbJtLlebdS8 QpHdzrx1FIzNv5OvJHIW+8XUsisYyYGVW+al05jP/8pJhZiwS+Jv2CpMHgxC1j/q RsaY0Dh/3UCI9tpu/yl7Pu34/pmoViyHyb79QMbcAHPbYfToy6dJtsGLOQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFA1U3/+cgjgY9Ni9PwTUMRWGepPMMB8GA1UdIwQY MBaAFJVKKu4IYXSwEnL653mtQx6wkq63MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFVvcTdnaGhkTEFTY3ZybmVhMURIckNTcnJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yMzUzOTYtMGU0Mi00Mzc3LTg1NWEt NDU2NWYwNGY4ZDg1LzEvRFZUZl81eUNPQmowMkwwX0JOUXhGWVo2azh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8yMzUzOTYtMGU0Mi00Mzc3LTg1NWEtNDU2NWYwNGY4ZDg1 LzEvbFVvcTdnaGhkTEFTY3ZybmVhMURIckNTcnJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAJfd3AwQB uQdSMA0EAgACMAcDBQAqAwQDMA0GCSqGSIb3DQEBCwUAA4IBAQBQ3M5dxeRHIsUb Ap7OFSsN87mRvgJdlkun8bRrcKpdLed+lEfnaMYpXx4cUbqdEUL7zzZZcKYU6tki 0121nNJzw4uOy57XQBkjlyLw6E4Yvc6PqTDPY7QAuq5jMUrUWdLzE/iVJm7cz0N/ n2dE0vANyXqJiVpX2V/gqRMY1wCPrG0blwXrwB6qixd4IRft+v9PKZCSGiXeIEA1 RvB07I/xYFmzlocsn2SUZ0qMabTusofBffKdmX2Wkyac2ZCdRf/ZRIAsJ3QsVhRc RmT0B60sOwI/oQrjMMXfBN60ScxiMyZXRCLGyzFtwtvnbk21uRq8/r+/xihCut6G EqB4MxXS -----END CERTIFICATE-----Generated at Mon Jan 19 17:33:00 2026 by rpki-client